logoalt Hacker News

declan_robertsyesterday at 12:30 PM3 repliesview on HN

It's a really cool feature but what is a scenario when your average programmer needs such sandboxing?


Replies

myaccountonhnyesterday at 12:44 PM

I sandbox all my utilities and programs in case some compromised third-party dependency decides to run lose. It's a way to limit the blast radius.

briaoeuidhtnsyesterday at 12:53 PM

you're embedding it as a scripting api and want to limit permissions to just what's needed

peteeyesterday at 1:29 PM

The TIC-80 game engine embeds Janet, and if i recall sandboxes the games created